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Abstract — We introduce the notion of two-level fingerprinting 
and traceability codes. In this setting, the users are organized in a 
hierarchical manner by classifying them into various groups; for 
instance, by dividing the distribution area into several geographic 
regions, and collecting users from the same region into one group. 
Two-level fingerprinting and traceability codes have the following 
property: As in traditional (one-level) codes, when given an illegal 
copy produced by a coalition of users, the decoder identifies one 
of the guilty users if the coalition size is less than a certain 
threshold t. Moreover, even when the coalition is of a larger size 
s (> t), the decoder still provides partial information by tracing 
one of the groups containing a guilty user. 

We establish sufficient conditions for a code to possess the 
two-level traceability property. In addition, we also provide 
constructions for two-level fingerprinting codes and characterize 
the corresponding set of achievable rates. 

I. Introduction 

In order to protect copyrighted digital content against unau- 
thorized distribution or piracy, several combinatorial schemes 
have been proposed in the literature (see ||4l for a survey). In 
this paper, we focus on two such techniques: fingerprinting 
codes [5] and traceability codes [6]. 

The owner (distributor) of the content hides a unique mark 
called a fingerprint in each licensed copy bought by a user. The 
collection of fingerprint assignments is referred to as a code. 
If a naive user distributes a copy of his fingerprinted content 
illegally, then the pirated copy can easily be traced back to 
the guilty user. However, if a group of users (pirates) form a 
coalition to detect the fingerprints and modify/erase them to 
create an illegal copy, then tracing a guilty user becomes a 
non-trivial task. 

Fingerprinting and traceability codes assign fingerprints in 
such a way that given an illegal copy, the distributor can use 
a tracing algorithm to identify at least one of the pirates as 
long as the coalition size does not exceed a certain threshold t, 
which is a parameter of the problem. However, if the coalition 
size exceeds this threshold, the output of the tracing algorithm 
can be useless. 

To overcome this weakness, we formalize the notion of 
multi-level fingerprinting codes, which are inspired by error- 
correcting codes with unequal error protection used in commu- 
nications problems (cf. for instance Bassalygo et al. |3|). We 
focus on the simplest case of two-level fingerprinting codes in 
this paper, but the concepts introduced apply to an arbitrary 
number of protection levels. 

In this setting, the users are organized in a hierarchical 
manner, for instance, according to geographical location. The 
distribution area is divided into several regions, and users 



from the same region are collected into one group. The 
two-level fingerprinting codes studied in this paper have the 
following property: As in traditional (one-level) codes, the 
tracing algorithm determines at least one of the guilty users if 
the coalition size is at most t. Moreover, even when a larger 
number s (> t) of pirates participate, the algorithm provides 
partial information by retrieving the index of a group that 
contains a member of the pirate coalition. 

Formal definitions are available in Section HI] In Section HiH 
we obtain sufficient conditions for two-level traceability codes. 
Finally, we provide constructions for two-level fingerprinting 
codes and analyze the achievable rates in Section |IV] 

II. Problem Statement 

Consider the problem where the content is to be distributed 
to A/1M2 users organized in Mi groups, each of which 
contains M2 users. Assume that there is some ordering of the 
groups, and of the users within each group. Thus, any user u 
is identified by a pair of indices u = {ui,U2) G [Mi] x [A/2], 
where the notation [n] stands for the set {1, . . . , n}. For a user 
u — {ui,U2), let ^(u) be its group index, i.e., ^(u) = ui. 

The distributor hides a distinctive fingerprint in each legal 
copy. The fingerprints are assumed to be distributed inside the 
host message so that their location is unknown to the users. 
The location of the fingerprints is the same for all users. 

Let n denote the length of the fingerprints. Let Q denote an 
alphabet of (finite) size q, usually taken to be {0, . . . , g — 1} 
with modulo q addition. An {n, M)q (one-level) code (C, D) 
is a pair of encoding and decoding mappings C : [M] Q", 
D : Q" [M] U {0}, where the decoder output signifies 
a decoding failure. For convenience, we sometimes abuse 
terminology by calling the range of C a code, and use the 
same notation C for it. 

The distributor's strategy of assigning fingerprints to users 
may be either deterministic or randomized as explained in the 
following subsections. Randomization can potentially increase 
the number of users that can be supported for a given finger- 
print length at the cost of a small error probability. 

Notation: Throughout we will denote random variables 
(r.v.'s) by capital letters and their realizations by lower case 
letters. The Hamming distance between vectors x, y will be 
written as (i^f(x, y), while |x| denotes the Hamming weight 
of X. If A" is a set of vectors, we abbreviate minxg x dn (x, y) 
as dniX^y). We will denote the g-ary entropy function 
by h{x) = -x\ogqX/{q - 1) - (1 - a;)log,(l - x). 
For two functions f{n),g{n), we write f{n) ^ g{n) if 
lim„^oo n-^ \og{f{n)/g{n)) = 0. 



A. Deterministic Codes 

An {n,Mi,M2)q two-level code {C, Di, D2) is a triple 
consisting of one encoding and two decoding mappings 

C : [Ah] X [M2] ^ Q", 

D, : Q" -> [Ml] U {0}, (1) 

D2 : Q" -> ([Afi] X [M2])U{0}, 

with signifying a decoding failure. A two-level deterministic 
assignment of fingerprints is given by the encoding mapping 
C of such a two-level code. The rate pair of an {n, Mi, M2)q 
two-level code is defined as 

(i?i,i?2) := f-log,Mi,llog,M2) . 

\n ^ n ^ J 

A coalition of users is an arbitrary subset of [Mi] x [M2]. 
Members of the coalition are commonly referred to as pirates. 
A coalition U has access to the collection of fingerprints, 
namely C{U), that are assigned to it. Let [/ be a coalition of t 
users and suppose C{U) = {xi, . . . , xt}. In order to conceal 
their identities from the distributor, the coalition's members 
attempt to create a pirated copy with a modified fingerprint 
y G Q". We assume that the code {C, Di, D2) is public and 
can be used by the pirates in designing their attack. 

Note that although the fingerprint locations are not avail- 
able to the pirates, they may detect some of these locations 
by comparing their copies for differences and modify the 
detected positions. Coordinate i of the fingerprints is called 
undetectable for the coalition U if xu — X2i = ■ ■ ■ = xu and 
is called detectable otherwise. The set of forgeries that can be 
created by the coalition in this manner is called the envelope 
and is given by: 

£:(xi, . . . ,Xf) = {y e Q" I e {x^, . . .,xu]yi e [n]] . 

(2) 

Given a pirated copy with a forged fingerprint, the distribu- 
tor performs tracing based on Di and D2 to locate one of the 
pirates. The decoder D2 attempts to trace the exact identity of 
one of the pirates, while Di focuses only on locating a group 
containing at least one of the pirates. 

In order to extend the notion of traceability to two-level 
codes, let us consider the case where the tracing is accom- 
plished using minimum distance (MD) decoding. Specifically, 
we take 

D2{y) = argmin d/f(C(u),y), 

uG[Mi]x[M2] (3) 

^i(y) =ep2(y)). 

If the minimum distance above is attained for multiple users, 
the decoder D2 outputs any one of the closest users. This 
leads us to the notion of two-level traceability codes in the 
deterministic setting. 

Definition 2.1: A two-level code C has {ti,t2)-traceability 
property (or is {ti,t2)-TA) where ti > t2 if: 

(a) For any coalition U of size at most t2 and any y G 
£iC{U)), the decoding result i:>2(y) £ U. 

(b) For any coalition U of size at most ti and any y G 
£{C{U)), the decoding result Di(y) G g{U). 



We observe that an {n, Mi, M2)q two-level code which 
is {ti,t2)-TA has the t2-TA property when viewed as an 
(n, MiM2)q one-level code; moreover, for coalitions of the 
larger size ti, one of the groups containing a pirate is closer 
to the forgery compared to the remaining groups. In this paper, 
we examine sufficient conditions under which a two-level code 
has the (ti, t2)-traceability property. 

B. Randomized Codes 

A randomized strategy to assign fingerprints is defined as 
the following random experiment. The distributor has a family 
of {n,Mi,M2)q two-level codes {{Ck, Dik, D2k),k G /C}, 
where /C is a finite set of "keys". The distributor chooses one 
of the keys according to a probability distribution (7r(fc), k G 
JC). If the key k is selected, then fingerprints are assigned 
according to Ck and tracing is done using Dik and D2k- The 
code resulting from this random experiment is called a (two- 
level) randomized code and is denoted by (C,2?i,2?2)- 

Following the standard convention in cryptography of the 
system design being publicly available, we allow the users to 
have knowledge of the family of codes {{Ck, Dik, D2k)} and 
the distribution 7r( ), while the exact key choice is kept secret 
by the distributor. 

Consider a coalition U of size t. Any attack by the coalition 
can be modeled as a randomized strategy V^(|-,...,), where 
y(y|xi, . . . , Xt) gives the probability that the coalition creates 
y given that it observes the fingerprints xi,...,xt. Our 
interest is in a special class of strategies which satisfy the 
restrictions ^ in creating a forgery. A strategy V is called 
admissible if 

V^(y|xi, . . . ,xt) = for all y ^ £{xi,. . .,xt). 

Let Vt denote the class of admissible strategies. 

Denote the random forgery generated by U using the 
strategy V by Yc,u,v- The distributor, on observing the forged 
fingerprint, employs the decoders Dik and D2k while using 
the key k. For a given coalition U and strategy V, we define 
the following error probabilities: 

ei(C,Pi, U,V)=P [ViiYcMy) i Q{U)\ 

y:CiA-(y)^<?(C/) 
e2{C,V2,U,V) = V\V2i:ic.v.y) i U] 

= E V{y\CK{U)), 

where the expectation is over the r.v. K with distribution 7r(fc). 

Definition 2.2: A randomized code (C,Pi,X'2) is said to 
be a (ti,t2)-fingerprinting with e-error where ti > t2 if: 

(a) For any coalition U of size at most t2 and any admissible 
strategy V, the error probability 62 (C, 2?2, U, V) < e. 

(b) For any coalition U of size at most ti and any admissible 
strategy V, the error probability ei{C,'Di,U,V) < e. 

We observe that an {n. Mi, M2)q two-level code which is 
(ii, t2)-fingerprinting has the t2 -fingerprinting property when 



viewed as an (n, MiM2)q one-level code; in addition, for the 
larger size-ti coalitions, the tracing algorithm can locate a 
group containing one of the pirates with high probability. 

A rate pair (i?i,i?2) is said to be achievable for 
g-ary (ti, ^2) -fingerprinting if there exists a sequence 
of (n, g"^"^" , g"-'^^")^ randomized codes that are {ti,t2)- 
fingerprinting with error probability e„ such that 



Choose Sij, G [Afi„] x [M2n], independently and uni- 

formly at random from iS^^„. Generate Mi„M2„ fingerprints 



lim En 

n — ^C30 



0, liminf i?i„ = _Ri, i=l,2. 

n — >oo 



The goal of this paper is to investigate constructions of two- 
level fingerprinting codes and to characterize the correspond- 
ing set of achievable rate pairs. 

Remark 2.3: 1) If an {n,Mi,M2)q two-level code is 
(ti, t2)-fingerprinting (resp., TA), then choosing any 
single user from every group forms an {n,Mi)q one- 
level code that is -fingerprinting (resp., TA). 

2) If an (n, MiM2)q one-level code is -fingerprinting 
(resp., TA), then for any t2 < ti, it can also be 
treated as a (n, Mi, M2)q two-level code that is (ti, 12)- 
fingerprinting (resp., TA). 

III. Traceability Codes 

It is known fSI that a one-level code of length n is i-TA if 
the distance between any pair of fingerprints is strictly greater 
than n{\ — l/t^)- We wish to obtain an analogous result for 
the case of two-level codes. 

For a given two-level code C, we define the following 
minimum distances: 

di(C):= min dH(C(u), C(v)), (4) 

u,ve[Afi]x[Af2] 

d2{C):= min ^^(^(u), C(v)). (5) 

u,vG[Mi]x[M2] 

Let d(C) =min(di(C),rf2(C)). 

Proposition 3.1: Suppose ti > t2 and C is a two-level code 
of length n with di(C) > n(l - and d2{C)>n{l- 

l/tl). Then C is (ti,t2)-TA. 

Proof: It is straightforward to see that the assumptions 
in the proposition imply that d{C) > n{l — l/t\). Therefore, 
property (a) in Definition 12. 1 1 follows directly from the result 
for one-level codes. 

Next, we show that property (b) is a consequence of 
di{C) > n{l — l/tf). Let U he a coalition of size at most ti 
and y G £{C{U)). Then, there exists some user u G U who 
coincides with y in at least n/ti coordinates. For any user u' 
such that ^(u') ^ Q{U), the number of agreements with y is 
at most ti{n — di{C)) < f^, thus establishing property (b). ■ 

IV. Fingerprinting Codes 

For w G [n], denote Sw,n {x G Q" : |x| = w}. For 
i?i,i?2 G [0,1], define Mi„ = Ahn = W'^^'l- 

Fix uj G [0, 1]. We take n such that w = um is an integer 
and construct an (n,Mi„,M2„)g two-level randomized code 
(C-,P^„,P^J as follows. 

For i G [Mi„], pick vectors independently and uniformly 
at random from Q". We will refer to the R^'s as "centers". 



X,: 



R, 



G [Mm] X [M2„] 



and assign Xy as the fingerprint for user 

Once the fingerprints are assigned, tracing is based on the 
MD decoder (O. The MD decoder may be sub-optimal in gen- 
eral; however, it is amenable for analysis in our construction. 

In the following subsections, we analyze the error proba- 
bility and characterize the achievable rate pairs for the above 
construction. The lemmas below will be useful in the analysis. 

Lemma 4.1: Let S have a uniform distribution on 5„,.„. 
Then, for / G [n] and a G S\{0}, P [S"; = a] ^ uj/{q- 1). 
Moreover, the r.v.'s {Si, I G [n]} are asymptotically pairwise 
independent. 

Lemma 4.2: Fix p G [0, 1] and £ > 0. For I G [n], let Zi be 
a Bernoulli r.v. with P [Zi = 1] = p, and let {Zi,l G [n]} be 
pairwise independent. Then, with Z := X^/gW have 



V[Z i[n{p-e)MP + e)]] < 



p{l -p) 



Notation: For a coalition U ~ {u^, . . . , u*}, we denote the 
realizations of Xui,R„i,Sui by Xi,ri,Si respectively, with 
Xi = 4- Si , i G \t\. Let z G Q* be a vector. Denote by 
Sz(xi, . . . , xt) the number of columns equal to in the 
matrix whose rows are xi, . . . , Xj. For p G [0, 1] and e > 0, 
define In{p,e) := [n{p - e),n{p + e)]. 

A. (t, 1) -fingerprinting 

First, we consider the (2, 1) -fingerprinting property. This is 
the simplest case of two-level fingerprinting that goes beyond 
the known techniques for one-level codes. Although coalitions 
of size 1 are trivial to handle for one-level fingerprinting, it is 
still non-trivial to construct a (2, 1) -fingerprinting code. 

Theorem 4.3: For any uj G [0, {q — l)/2q], the randomized 
code {Ci^,T)i^, X'2n) is (2, 1) -fingerprinting with error proba- 
bility decaying to if 



Ri < l-h{{q-l)/2q + uj), 
R2 < h{Lu). 



(6) 
(7) 



Discussion: The above theorem provides a set of achievable 
rate pairs for g-ary (2, 1) -fingerprinting. Let us fix Q = {0, 1} 
and put the result in the perspective of bounds available for 
one-level fingerprinting (see Figure [T]l- 

• Outer bound: Since the (2, l)-fingerprinting property 
impUes one-level 1 -fingerprinting, we should have i?i + 
i?2 < 1- Moreover, i?i cannot exceed the rate of a 
one-level 2-fingerprinting code (by part (1) of Remark 
12. 3t ; thus, any upper bound for it also applies to Ri. In 
particular, by |7| i?i < 0.25. 
> Inner bound: By part (2) of Remark 12.31 the rate pairs 
(i?i, ^2) such that R1+R2 < 0.188 are achievable (with 
MD decoding) using the 2-fingerprinting code given in 
Is). In fact, by allowing other decoders, we can do better, 
achieving Ri + R2 < 0.25 through the 2-fingerprinting 
construction in f2 |. 
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Fig. 1. Achievable rate region for binary (2, l)-fingerprinting. The bounds 
from previous works follow by using one-level fingerprinting schemes. 



Proof: (of Theorem 14.3b Size-1 coalitions: Let u = 
(wi,U2) be the pirate. For size-1 coaHtions, the envelope is 
degenerate as it consists of only the user's own fingerprint. 
Now, 

= P [3u' ^ u : Xu, = Xu] 
<P[3uVu:< = ui,Xu, = Xu] 

+ P[3uVu:wi ^ui,Xu. =XJ 

{a) 

< P [3u2 7^ U2 : S„j^ = Suru2\ 

+ P [3u[ ^ ui : dff (R„i , Xu) < w] 

(b) 

< <z"^-P [S„,„. = S„,„,] + g"^iP [dff(R„- ,X„) < ui\ 

where (a) is due to the fact that if the fingerprint of another user 
matches with the pirate's fingerprint, then the corresponding 
center is within distance w from the pirate's fingerprint, and 
(b) follows from the union bound. Consequently, the error 
probability for size-1 coalitions approaches if i?2 < ^(i^) 
and i?i < 1 - h{uj). 

Size-2 coalitions: There are two possibilities: either both 
users are in the same group or they are in different groups. 
It turns out that the latter case is the dominant one. Since 
the analysis for the two cases is similar, we only consider the 
latter case below. 

Let U — {u^,u^} be such a coalition. For any strategy 
F G V2, we have 

= P [ri,r2, 81,82] ^F(y|xi,X2) 



ri,r2,si,S2 



xP[l?^„(y) ^g([/)|ri,r2,8i,S2 
Consider the inner probability term 



(8) 



ri,r2,8i,S2 



(a) 



< P [3u' ^U:u\<^ g{U),dH{X^',y) < dH({xi,X2},y) 



(ri,r2, 81,82) 



< g"^ip [dH(R„-,y) < dH({xi,X2},y) , 

where we have exploited the independence in the construction 
in (a), and (b) follows because if the fingerprint of another user 
is within distance d from y, then the corresponding center is 
within d + w from y. For e > 0, define 

Va e Q, 

S(q,q)(xi,X2) e /„(l/(7^e/g) 

Observe that Xyi and Xu2 are independent and uniformly 
distributed over Q". Therefore, using Lemma l4~2l it is a simple 
matter to show that P (R„i , R„i , S^i , 8^2 ) ^ 7^ decays to 
as n ^ 00. Now, take any (ri, r2, 81, S2) £ 7^ and y G 
£'(xi,X2). The number of undetectable positions in {xi,X2} 
is at least n{l/q — e), implying that (i//({xi,X2},y) < 
^.M— i+ej. Thus, in this case 



q 



nR 



P [dHiIiu{,y) < dff({xi,X2},y) 



< 



dH(R„'^,y) < 



1 - 



Substituting the above in dH) and taking e ^ 0, we conclude 
that the error probability for size-2 coalitions approaches if 
dSll holds. ■ 

We now extend the techniques to larger coalitions. 

Theorem 4.4: For any w such that ^-^(l — -j^j+o; < ^y!-, 
the randomized code (C", 2?!f^„, l?2n) is (i, l)-fingerprinting 
with error probability decaying to if 



Ri<l-h 
R2 < h{uj). 



t- 1 



1 - 



(9) 
(10) 



Proof: Size-l coalitions: For a single pirate u, the analysis 
in Theorem 14.31 proves that the probability of decoding error 
approaches if i?2 < h{uj) and i?i < 1 — h{uj). 

Size-t coalitions: It can be shown that the case where the t 
pirates are in distinct groups is the dominant one. Once this 
is shown, we use exactly the same arguments as in the case 
of size-2 coalitions in Theorem 14.31 We finally obtain that the 
error probability for coalitions of size t approaches if (|9]) 
holds. ■ 

Remark 4.5: A sufficiently large alphabet is required in 
order for an lo satisfying ^1 — j 
For instance, it suffices to take q > t + 1. 



- lli < - — to exist. 

— 9 



B. (t, 2)-fingerprinting 

Let q > 3. For oj, 7, a, /3 G [0, 1], with a < 1 — 7, /3 < 7, 
a + P < uj, uj ~ a < "f, lei 

N,/ ct \ , „,,/cj — a — /? 



< P [3u[ i Q(U) : dH(R„i,y) < d^f({xi, X2}, y) + u;] 



,1-7 



g-2 
9-1 



7-/3 
-/?log^(q-2). 



Let 



Siito) 



1 

1 - - 

q 



max (p{uj,-f,a,/3), 

u;^<7<l-(l-cj)^,7-/3+Q<5i(u;) 

max ip{Lo,^,a, P). 

'J, a, 13: 

'^{^)<l<i-^n-l3+a<S2{i^) 



Theorem 4.6: Let g > 3. For any to such that ^^-'-(l — 
^) + w < the randomized code (C,^, P^",,, P^„) is 

{t, 2)-fingerprinting with error probabiHty decaying to if 



Ri<l-h[ ^—^ ( 1 - 



1 



r,t-l 



t \ q'' 
R2 < h{uj) - max(/i(a;),/2(tj)). 



(11) 
(12) 



Proof: Size-i coalitions are handled in the same way as 
in Theorem 14.41 

Size-2 coalitions: There are two possibilities depending on 
whether the pirates belong to the same group or not. We sketch 
the case where they are in different groups below. The other 
case is analyzed similarly. 

Consider a coalition U = {u^,u^}, where the users are in 
different groups, and let G V2 be an admissible strategy. 
We have 



= P [i"i,r2, 81,82] ^F(y|xi,X2) 

ri,r2,si,S2 y 

xP[2?^„(y) ^C/|ri,r2,Si,S2]. 



(13) 



Now, 



where, the events _Ei , £'2 , E3 are formed of those u' ^ U 
that satisfy (i^f(Xu',y) < d^f ({xi, X2}, y) and the conditions 
u[ — u}, u[ — u\, u'l ^ G{U), respectively. The error event 



i?3 was akeady analyzed in Theorem 14.31 and its conditional 
probability approaches if (|6]l holds. We consider Ei below. 
The analysis for E2 is identical by symmetry. 



El 
P 

nR 



nR.2p 



ri,r2,8i,S2 

34 ^ u\ : dnivi + S„i„/_,y) < dH({xi,X2},y 
^^(ri + S„i„/_,y) < di/({xi,X2},y) 
dH{^u\u'.y') < dH{{si,Vi +X2},y' 



(14) 



where y' = y + ri £ £(si,ri + X2). In this case, we use 
Lemmas 14. 1 1 and |4~2] to show that 



S(o,o)(8i,ri + X2) : 
T,l := \ (ri,r2, 81,82) : S(Q,a') (si, n +X2) 
Va,a' e Q\{0} 



is the typical set. For simplicity, we have omitted e and will 
use the approximate relations ~, <, > in its place. Now, take 
any (ri, r2, Si, S2) G and y' e £(si,ri+X2). The number 
of undetectable positions in {si, ri +X2} is ~ n/q, while the 
number of coordinates where both symbols are non-zero is 
~ nuo{q- l)/q. This implies dff({si,ri +X2},y') < n52{uj) 
and nLu{q - l)/q < |y'| < n{l - (1 - uj)/q). 



Let |y'| = 7n, where 7 G [0, 1]. Then 



c^H(S„i.4,y') < nS2{uj) 



,7) 



where 



E{uj,j) = h{Lj) 



max 

Q,/3: 
'y — P+a<S2{Lo) 



V9(w,7,a,/?). 



Since 7 can be chosen by the pirates such that ^^^y'- ^ 7 ^ 
1 — by substituting the above in (fT4b . we conclude that 
the conditional probability of Ei (and E2) approaches if 
i?2 < h{uj) — /2(w). Similarly, we obtain R2 < h{uj) — fi{tjj) 
when the pirates are in the same group. ■ 
Let us show that the rate region thus defined is nontrivial. 
Given ui and 7, the maximizing values of the other arguments 
of (f are a = uj{1 — 7) and (3 = uj^j {q — 1), so 



ip{uj,'y,a,f3) < hiuj) ~ -fuj 



(log. 



1 , log<,(<Z-2) 



q^l 



Consequently, we get max(/i(ijj), f2{^)) < h{uj) — D, where 
D = D{uj) = oj^log ^ 



and D{uj) > for 



=g q-2 ' q-1 

all Lu > 0. This shows that the r.-h.s. of il2t is positive. By 
Remark |431 the r-h.s. of (fTTT i is also positive if q >t+l and 



9-1 



This calculation can be further 



refined because of the additional constraints on the parameters 
a, /3, 7 mentioned above. 
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